Design secret creation, storage, delivery, rotation, revocation, encryption-key hierarchy, access, auditing, and emergency recovery.